Aerc has rolled out signing and encryption support recently. I've tested signing, seems to work fine. And now it uses normal GPG keystore, not its own.